Plerdy SEO Tracker

Reported Context (3)

websites, fake sites masquerading as popular websites, and a supply chain attack aimed at Plerdy SEO Tracker – to serve malicious JavaScript that triggers the vulnerability and ultimately deploy the CISA Adds Patched Apple Flaw CVE-2024-27834 to KEV After Exploitation Reports
Further analysis of these seemingly unrelated websites revealed a common denominator: the Plerdy SEO Tracker, a third-party component that had been compromised by the intrusion set for one week. Sekoia Details APT29-Linked Watering-Hole Campaign Using Patched Mobile Exploits
fake domains, and a supply chain attack involving a Ukrainian web analytics service called Plerdy SEO Tracker. Sekoia Links APT29 to Mobile Watering-Hole Campaign Using Hijacked Analytics Script

CVE (10)

Malware (4)

People (4)

Threat Actors (3)

MITRE ATT&CK (14)

Vendors (3)

Products (9)

Tools (1)

Industries (6)

Countries (6)

Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.